Support Testing and Security GH-300 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the key difference between a unit test and an integration test?

   • AUnit tests test a single component, while integration tests test interactions between components
   • BUnit tests check for security issues, while integration tests check for performance issues
   • CUnit tests are written by developers, while integration tests are written by QA
   • DUnit tests are faster to run than integration tests
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A developer is reviewing a function that reads a file from disk and processes its contents. The function does not close the file handle after reading. What security or performance issue should Copilot flag?

   • ABuffer overflow in the file reading logic
   • BCross-site scripting (XSS) vulnerability in the file contents
   • CSQL injection vulnerability in the file processing logic
   • DResource leak that can lead to file descriptor exhaustion
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A developer is using Copilot to write a unit test for a function that returns the sum of an array of numbers. The function should return 0 for an empty array. Which assertion is the clearest and most appropriate for this test?

   • Aexpect(sum([])).toBe(0)
   • Bexpect(sum([])).toBeTruthy()
   • Cexpect(sum([])).not.toBeNull()
   • Dexpect(sum([])).toBeDefined()
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A developer is reviewing a web application that allows users to upload profile pictures. The application stores the files on the server and serves them back to users. The developer asks Copilot for security and performance improvements. The application currently has no file size limit and serves files directly from the upload directory. Which combined recommendation addresses both security and performance concerns?

   • AEnforce a file size limit and serve files through a separate content delivery network (CDN)
   • BStore files in a database and serve them via a server-side script
   • CRename files to random names and store them outside the web root
   • DCompress all images and serve them with a long cache header
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A developer is using Copilot to generate tests for a function that divides two numbers. The function is documented to throw an error when the divisor is zero. The developer wants to ensure the test suite covers the most critical edge cases. Which set of test cases is the most comprehensive?

   • ADivision of a very large number by a very small number
   • BTwo normal divisions with different numbers
   • CA normal division, division by zero, and division of zero by a non-zero number
   • DDivision by zero and division by a negative number
   Reveal Solution Discussion Select an answer first